Information processing apparatus recording job execution history, information processing method, and storage medium

ABSTRACT

An information processing apparatus saves log information related to an executed job, and includes a determination unit that determines one of at least a first mode and a second mode as a saving mode for the log information, based on setting by a user, and a saving control unit that saves log information including information about a plurality of items related to an executed job, in a case where the first mode is determined as the saving mode, and saves log information not including information about a predetermined first item and including information about a second item different from the first item, among the plurality of items related to the executed job, in a case where the second mode is determined as the saving mode.

CROSS-REFERENCE TO RELATED APPLICATION

This application is a Continuation of U.S. application Ser. No.16/512,025, filed Jul. 15, 2019, which claims priority from JapanesePatent Application No. 2018-136852, filed Jul. 20, 2018, which arehereby incorporated by reference herein in their entireties.

BACKGROUND OF THE INVENTION Field of the Invention

The present invention relates to an information processing apparatusrecording a job execution history, an information processing method, anda storage medium.

Description of the Related Art

Japanese Patent Application Laid-Open No. 2007-83682 discusses an imageforming apparatus that records a job execution history. An image formingapparatus that can be set to hide a job history and an image formingapparatus that cannot output a job history to outside from the viewpointof information security are also known.

SUMMARY OF THE INVENTION

According to an aspect of the present invention, an informationprocessing apparatus saves log information related to an executed joband includes at least one memory device that stores a set ofinstructions, and at least one processor that executes the set ofinstructions to determine one of at least a first mode and a second modeas a saving mode for the log information, based on setting by a user,save log information including information about a plurality of itemsrelated to an executed job, in a case where the first mode is determinedas the saving mode, and save log information not including informationabout a predetermined first item and including information about asecond item different from the first item, among the plurality of itemsrelated to the executed job, in a case where the second mode isdetermined as the saving mode.

Further features of the present invention will become apparent from thefollowing description of exemplary embodiments with reference to theattached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram illustrating an example of an appearance of amultifunction peripheral.

FIG. 2 is a diagram illustrating an example of a hardware configurationof the multifunction peripheral.

FIG. 3 is a diagram illustrating an example of a software configurationof the multifunction peripheral.

FIG. 4 is a flowchart illustrating an example of basic informationprocessing according to a first exemplary embodiment.

FIG. 5 is a flowchart illustrating an example of setting changeprocessing according to the first exemplary embodiment.

FIG. 6 is a flowchart illustrating an example of basic informationprocessing according to a second exemplary embodiment.

FIG. 7 is a flowchart illustrating an example of setting changeprocessing according to the second exemplary embodiment.

FIG. 8 is a flowchart illustrating an example of basic informationprocessing according to a third exemplary embodiment.

FIG. 9 is a flowchart illustrating an example of logout processing.

DESCRIPTION OF THE EMBODIMENTS

Exemplary embodiments of the present invention will be described indetail below with reference to the drawings.

In a first exemplary embodiment, a job history recording method for notretaining a predetermined item among items related to job execution aslog information will be described. The predetermined item not to beretained as log information is, for example, information linked toidentification of a user. Examples of the predetermined item include ajob name, user identification information, a file name, and destinationinformation that are related to an executed job. The first exemplaryembodiment will be described below as an exemplary embodiment in whichpersonal information is not retained, i.e., the personal information isused as an example of the predetermined item not to be retained as loginformation.

FIG. 1 is a diagram illustrating an example of an appearance of amultifunction peripheral 100. Of the multifunction peripheral 100, anupper part includes a scanner 120 and a lower part includes a printer110. The multifunction peripheral 100 is an example of an image formingapparatus.

FIG. 2 is a diagram illustrating an example of a hardware configurationof the multifunction peripheral 100. The multifunction peripheral 100includes a controller unit 200, an operation unit 220, the scanner 120,and the printer 110. The operation unit 220, the scanner 120 serving asan image input device, and the printer 110 serving as an image outputdevice are connected to the controller unit 200. The controller unit 200has a central processing unit (CPU) 202. The CPU 202 starts an operatingsystem (OS), using a boot program stored in a read only memory (ROM)206. Further, the CPU 202 executes an application program stored in theROM 206, on this OS. A software configuration of the multifunctionperipheral 100 illustrated in FIG. 3 to be described below is therebyimplemented, and processing of a flowchart illustrated in each of FIGS.4 to 9 to be described below is thereby implemented as well. In anotherexample, at least a part of the function or processing of themultifunction peripheral 100 may be implemented by causing, for example,a plurality of CPUs, random access memories (RAMs), ROMs, and hard diskdrives (HDDs) to operate together. In another example, at least a partof the function or processing of the multifunction peripheral 100 may beimplemented by using a hardware circuit. In another example, thefunction or processing of the multifunction peripheral 100 may beimplemented by causing a plurality of apparatuses to operate together.

A RAM 203 is used as a work area of the CPU 202. Further, the RAM 203provides, in addition to the work area, a cache area for temporarilystoring data. A HDD 205 stores various kinds of log data such as ahistory of print jobs executed in the multifunction peripheral 100 and afax communication history. The ROM 206, the RAM 203, an operation unitinterface (I/F) 201, a device I/F 204, a network I/F 207, and an imageprocessing unit 208 are connected to the CPU 202, via a system bus 210.

The operation unit I/F 201 is an interface with the operation unit 220having a touch panel, and outputs image data to be displayed by theoperation unit 220 to the operation unit 220. The scanner 120 and theprinter 110 are connected to the device I/F 204. The device I/F 204performs synchronous/asynchronous conversion of image data. The networkI/F 207 is connected to a network 230, and inputs and outputsinformation from and to each device on the network 230 via the network230. The image processing unit 208 performs processing such asprocessing for an image input from a scanner, processing for an image tobe output to a printer, image rotation, image compression, resolutionconversion, color space conversion, and tone conversion. Amodulator-demodulator/network control unit (MODEM/NCU) 209 has afunction of performing modulation and demodulation of facsimiletransmission/reception signals, and transmitting a selection signal (adial pulse or dial tone) to a public line 240. The MODEM/NCU 209 alsoperforms fax incoming call operation based on detection of a callingsignal.

FIG. 3 is a diagram illustrating an example of a software configurationof the multifunction peripheral 100.

A user interface (UI) control module 340 identifies a user by receivinglogin information about the user, and receives a job for themultifunction peripheral 100. A job control module 330 controls variousjobs such as printing, scanning, and fax transmission in themultifunction peripheral 100.

A log management module 300 performs reading or writing for each of ajob log 310 and a job setting history 320, based on a request from eachof the job control module 330, the UI control module 340, and a reportcontrol module 350. The UI control module 340 can read out the job log310 and display the job log 310 at the operation unit 220, or read outthe job setting history 320 and display the job setting history 320 atthe operation unit 220, in response to an instruction from the user. Thejob log 310 and the job setting history 320 are stored in the HDD 205.

A log management module IF unit 301 receives a request for reading orwriting for each of the job log 310 and the job setting history 320,from outside the log management module 300.

The log management module IF unit 301 can also receive an event from thejob control module 330 when a job ends, and an event from the UI controlmodule 340 when a user logs out.

A personal information determination unit 302 determines which piece ofdata among a plurality of pieces of data managed in the job log 310 orthe job setting history 320 corresponds to personal information. Thepersonal information determination unit 302 thereby determines whetherthis piece of data is a target piece of data to be recorded in the joblog 310 or the job setting history 320.

A log data access unit 303 performs actual read-write (RW) processingfor each of the job log 310 and the job setting history 320, andcontrols data writing based on a result of determination by the personalinformation determination unit 302.

FIG. 4 is a flowchart illustrating an example of information processingfor recording each of the job log 310 and the job setting history 320,when a job is executed by the multifunction peripheral 100 according tothe first exemplary embodiment.

In step S401, the UI control module 340 receives job setting from theuser via the operation unit 220. For example, the UI control module 340receives setting related to job control to be executed by themultifunction peripheral 100, such as the number of copies for a copyjob, and a transmission destination for a fax transmission job, via theoperation unit 220. Further, the UI control module 340 may store settinginformation that indicates setting for not retaining information about adesignated item in a job log, into the HDD 205, based on a designationoperation performed by the user via the operation unit 220. Thisprocessing is an example of first setting processing for not retaininginformation about a designated item in a job log. The information aboutthe designated item is, for example, personal information. The user candesignate an item that the user does not want to retain, among aplurality of items, via a screen.

In step S402, the UI control module 340 determines whether a job startoperation is received from the user. If the UI control module 340determines that a job start operation is received from the user (YES instep S402), the processing proceeds to step S403. If the UI controlmodule 340 determines that a job start operation is not received fromthe user (NO in step S402), step S401 is repeated.

In step S403, the UI control module 340 saves the job setting receivedin step S401, in the job setting history 320 managed by the logmanagement module 300.

In step S404, the job control module 330 starts execution of a job.

In step S405, the job control module 330 generates log data of the jobof which execution has started, in the job log 310 managed by the logmanagement module 300.

In step S406, the job control module 330 determines whether the job iscompleted. If the job control module 330 determines that the job iscompleted (YES in step S406), the processing proceeds to step S408. Ifthe job control module 330 determines that the job is not completed (NOin step S406), the processing proceeds to step S407.

In step S407, the job control module 330 updates the job log 310 managedby the log management module 300, based on a job execution status.

In step S408, the job control module 330 performs job terminationprocessing.

In step S409, the personal information determination unit 302 determineswhether the setting indicates non-recording of the personal informationin the job log 310, based on the setting information stored in the HDD205. If the personal information determination unit 302 determines thatthe setting indicates non-recording of the personal information in thejob log 310 (YES in step S409), the processing proceeds to step S410. Ifthe personal information determination unit 302 determines that thesetting indicates recording of the personal information in the job log310 (NO in step S409), the processing proceeds to step S411.

In step S410, the log data access unit 303 prevents writing of datacorresponding to the personal information among the log data of the job,in the job log 310. Further, in a case where the personal information iswritten in the job log 310 in step S405 or S407, the log data accessunit 303 deletes the personal information from the job log 310. In thisway, the log data not including the data corresponding to the personalinformation is generated. The processing in step S410 is an example ofcontrol processing for deleting information about a designated item froma job log after completion of a job, in a case where setting is made notto retain the information about the designated item in the job log.

In step S411, the log data access unit 303 records the log data of thejob, including the data corresponding to the personal information, inthe job log 310.

Table 1 indicates a history of print jobs, as an example of the job log310 in a case where the personal information is recorded in step S411.

TABLE 1 Job User File Operation ID Name Name Job Start Time Job End TimeResult 1 Hiroshima COPY 1 2018 May 21 2018 May 21 Success 18:41 18:43 2Miyazaki aaa.pdf 2018 May 21 2018 May 21 Success 18:42 18:44 3 Yamaguchiabc.doc 2018 May 21 2018 May 21 Success 18:51 18:55 4 Chiba ccc.txt 2018May 21 2018 May 21 Failure 18:55 18:59In Table 1, information including user names and file names that are thepersonal information is recorded in the job log 310.

Table 2 indicates a history of print jobs, as an example of the job log310 in a case where the personal information is not recorded in stepS410.

TABLE 2 Job User File Operation ID Name Name Job Start Time Job End TimeResult 1 — — 2018 May 21 2018 May 21 Success 18:41 18:43 2 — — 2018 May21 2018 May 21 Success 18:42 18:44 3 — — 2018 May 21 2018 May 21 Success18:51 18:55 4 — — 2018 May 21 2018 May 21 Failure 18:55 18:59In Table 2, information not including user names and file names that arethe personal information is recorded in the job log 310, as a history ofprint jobs. In this way, in the present exemplary embodiment, in a casewhere a mode (a second mode) of not recording a predetermined item inthe job log 310 is set, log information not including the predetermineditem (e.g., the personal information) is generated accompanying theexecution of a job and the generated log information is saved. The loginformation not including the predetermined item may be generated bydeleting a part of information (i.e., the information of thepredetermined item) after the log information including thepredetermined item is stored. In this process, information indicatingthat the information about the designated item is deleted may berecorded. Alternatively, the log information may be generated not toinclude the predetermined item, without execution of the deletionprocessing.

Meanwhile, in the present exemplary embodiment, for example, a jobexecution start time, a job execution end time, and informationindicating success or failure of job execution are recorded as the loginformation, even if the mode of not recording the predetermined item iseffective.

The user name and the file name in the print job are each described asthe predetermined item not to be retained as log information, but thepredetermined item is not limited to the user name and the file name Thepredetermined item can be any item if the item is information linked toidentification of a user who has executed a job. For example, thepredetermined item is a job name, user identification information, afile name, or destination information related to the executed job.

In Table 2, a state where each of a user name and a file name is notrecorded is expressed as “—” for convenience. However, with respect tothe way of holding data in the job log 310, any type of format may beused if the format makes it impossible to guess the originalinformation. For example, null data may be used.

Table 3 indicates an example of data of the job log 310 related to theactive job in step S405 to step S407.

TABLE 3 Job User File Job End Operation ID Name Name Job Start Time TimeStatus 1 Hiroshima COPY 1 2018 May 21 — Printing 18:41 2 Hiroshimaaaa.pdf 2018 May 21 — Waiting 18:42As for the active job, because the user name and the file name arerecorded, the user can easily confirm the status of the active job.

FIG. 5 is a flowchart illustrating an example of processing for changingsetting that indicates whether to record the personal information in thejob log 310.

In step S501, the UI control module 340 receives a change operation forthe setting that indicates whether to record the personal information,from the user via the operation unit 220. Based on the change operation,the UI control module 340 changes the setting information stored in theHDD 205. Here, the initial setting is made to retain information aboutall the items of a job log. The processing in step S501 is an example ofprocessing for changing setting not to retain information about adesignated item in a job log.

In step S502, the log data access unit 303 determines whether thesetting indicates non-recording of the personal information in the joblog 310, based on the setting information. If the log data access unit303 determines that the setting indicates non-recording of the personalinformation in the job log 310 (YES in step S502), the processingproceeds to step S503. If the log data access unit 303 determines thatthe setting indicates recording of the personal information in the joblog 310 (NO in step S502), the processing in the flowchart illustratedin FIG. 5 ends.

In step S503, the log data access unit 303 deletes the datacorresponding to the personal information from the data already recordedin the job log 310. The processing in step S503 is an example of controlprocessing for deleting information about a designated item from a joblog, in a case where setting is changed not to retain the informationabout the designated item in the job log. For example, in a case wherethe data of the job log 310 is in the state illustrated in Table 1, thedeletion of the user names and the file names in step S503 results inthe state illustrated in Table 2.

In a conventional technology, a job history remains recorded in the mainbody of an image forming apparatus, and therefore, there is a risk ofremovable of a hard disk, and a risk of fraudulent acquisition of loginformation.

Even if there is no fraudulent act, there is a case where informationfor identifying a user is transmitted to an external apparatus such asan external server as log information despite the intention of the user.

In the above-described exemplary embodiment, log information notincluding information about a predetermined first item and includinginformation about a second item different from the first item among aplurality of items of an executed job is saved in a case where theabove-described second mode is determined as a saving mode for a joblog.

The information about the predetermined first item includes at least oneof a job name, user identification information, a file name, anddestination information that are related to the executed job.

The second item includes at least one of a job execution start time, ajob execution end time, and information indicating success or failure ofjob execution.

According to the above-described exemplary embodiment, information foridentifying a user, such as a job name, user identification information,a file name, and destination information, can be prevented from beingsaved as log information.

Therefore, even in a case where a hard disk is removed or a job historyis acquired in a fraudulent way, leakage of the information foridentifying the user can be prevented.

Alternatively, the information for identifying the user can be preventedfrom being transmitted to an external apparatus such as an externalserver as log information despite the intention of the user, by settingof the second mode by the user.

In a second exemplary embodiment, a method for recording a history in acase where job setting for not retaining information about apredetermined item related to job execution is made will be described.

In the present exemplary embodiment, personal information will bedescribed as an example of the predetermined item not to be retained aslog information, but the predetermined item is not limited to thisexample. As with the first exemplary embodiment, the predetermined itemnot to be retained as log information is, for example, informationlinked to identification of a user. Examples of the predetermined iteminclude a job name, user identification information, a file name, anddestination information that are related to an executed job.

As for FIGS. 1, 2, and 3, the second exemplary embodiment is similar tothe first exemplary embodiment, and therefore description with referenceto these drawings will be omitted. FIG. 6 is a flowchart illustrating anexample of information processing for recording in a job log 310 and ajob setting history 320, during job execution by a multifunctionperipheral 100 according to the second exemplary embodiment.

In step S601, a UI control module 340 receives job setting from a uservia an operation unit 220. For example, the UI control module 340receives setting related to job control to be executed by themultifunction peripheral 100, such as the number of copies for a copyjob, and a transmission destination for a fax transmission job, via theoperation unit 220. Further, the UI control module 340 may store settinginformation that indicates setting for not retaining information about adesignated item in a job log, into a HDD 205, based on a designationoperation performed by the user via the operation unit 220. Furthermore,the UI control module 340 may include setting for not retaininginformation about an item designated by the user in setting informationstored in the HDD 205, based on a designation operation performed by theuser via the operation unit 220. This processing is an example of secondsetting processing for not retaining information about an itemdesignated by a user.

In receiving the job setting in step S601, the UI control module 340 cancall up the past data of the job setting history 320. The UI controlmodule 340 thereby supports an operation in a case where the user wantsto execute a job based on setting similar to setting for a job executedby the user in the past.

Table 4 indicates an example of the job setting history 320.

TABLE 4 Job ID Type Job Setting 1 Copy Scan mode: Two-sided scan, Printmode: Two-sided print, Monochrome/color: Color mode, Density: 7 2 FaxDestination: 0297889012, Density: Auto, Document size: A4, Resolution:200 dpi 3 Print File name: abc.doc, Monochrome/color: Color mode,Feeder: Cassette 1For example, when the user performs copy, the UI control module 340calls up data corresponding to a job type of copy from the job settinghistory 320, and displays the called-up data at the operation unit 220.The user can thereby avoid setting “Scan mode: Two-sided scan, Printmode: Two-sided print, Monochrome/color: Color mode, Density: 7”repeatedly.

In step S602, the UI control module 340 determines whether a job startoperation is received from the user. If the UI control module 340determines that a job start operation is received from the user (YES instep S602), the processing proceeds to step S603. If the UI controlmodule 340 determines that a job start operation is not received fromthe user (NO in step S602), step S601 is repeated.

In step S603, a personal information determination unit 302 determineswhether the setting indicates non-recording of personal information inthe job setting history 320, based on the setting information stored inthe HDD 205. The UI control module 340 has stored into the HDD 205setting information that indicates whether to record the personalinformation in the job setting history 320, based on a setting operationperformed by the user via the operation unit 220. If the personalinformation determination unit 302 determines that the setting indicatesnon-recording of the personal information in the job setting history 320(YES in step S603), the processing proceeds to step S605. If thepersonal information determination unit 302 determines that the settingindicates recording of the personal information in the job settinghistory 320 (NO in step S603), the processing proceeds to step S604.

In step S604, a log data access unit 303 records information about thejob setting including data corresponding to the personal information, inthe job setting history 320.

Table 4 indicates an example of data of the job setting history 320 in acase where the personal information is to be recorded. The personalinformation, such as a destination for a job type of fax and a file namefor a job type of print, is recorded in Table 4.

In step S605, the log data access unit 303 records information obtainedby deleting the data corresponding to the personal information from theinformation about the job setting, in the job setting history 320. Theprocessing in step S605 is an example of control processing forrecording information obtained by deleting information about adesignated item from job setting in a job setting history, in a casewhere setting is made not to retain the information about the designateditem in the job setting history.

Table 5 indicates an example of data of the job setting history 320 in acase where the personal information is not to be recorded.

TABLE 5 Job ID Type Job Setting 1 Copy Scan mode: Two-sided scan, Printmode: Two-sided print, Monochrome/color: Color mode, Density: 7 2 FaxDestination: -, Density: Auto, Document size: A4, Resolution: 200 dpi 3Print File name: -, Monochrome/color: Color mode, Feeder: Cassette 1The data recorded here is data obtained by deleting the destination forthe job type of fax and the file name for the job type of print, asinformation corresponding to the personal information.

In the present exemplary embodiment, the destination for the job type offax and the file name for the job type of print are each described as anexample of the personal information. However, the personal informationis not limited to these examples, and can be any kind of information ifthe information is linked to identification of a user.

The processing in and after step S606 is similar to the processing inand after step S404 of the flowchart in FIG. 4 in the first exemplaryembodiment and therefore will not be described.

FIG. 7 is a flowchart illustrating an example of processing for changingsetting that indicates whether to record the personal information in thejob setting history 320.

In step S701, the UI control module 340 receives a change operation forthe setting that indicates whether to record the personal information inthe job setting history 320, from the user via the operation unit 220.Based on the change operation, the UI control module 340 changes thesetting information. Here, the initial setting is made to retaininformation about all the items of the job setting history 320. Theprocessing in step S701 is an example of processing for changing settingnot to retain information about a designated item in a job settinghistory.

In step S702, the log data access unit 303 determines whether thesetting indicates non-recording of the personal information in the jobsetting history 320, based on the setting information. If the log dataaccess unit 303 determines that the setting indicates non-recording ofthe personal information in the job setting history 320 (YES in stepS702), the processing proceeds to step S703. If the log data access unit303 determines that the setting indicates recording of the personalinformation in the job setting history 320 (NO in step S702), theprocessing in the flowchart illustrated in FIG. 7 ends.

In step S703, the log data access unit 303 deletes the datacorresponding to the personal information from the data already recordedin the job setting history 320. The processing in step S703 is anexample of control processing for deleting information about adesignated item from a job setting history, in a case where setting ischanged not to retain the information about the designated item in thejob setting history. For example, in a case where the data of the jobsetting history 320 is the state illustrated in Table 4, the deletion ofthe destination and the file name in step S703 results in the stateillustrated in Table 5.

According to the present exemplary embodiment, after setting (a firstmode) for retaining a predetermined item is switched to setting (asecond mode) for not retaining the predetermined item, information aboutthe predetermined item recorded during the first setting is deleted. Inthis way, after the second setting is made, the information about thepredetermined item recorded before the second setting can also beprevented from being held.

Leakage of information for identifying a user can be thereby prevented.Alternatively, the information for identifying the user can be preventedfrom being transmitted to an external apparatus such as an externalserver as log information despite the intention of the user, by settingof the second mode by the user.

In a third exemplary embodiment, a method for not retaining personalinformation in a job history by deleting the personal information at thetime of logout will be described.

In the present exemplary embodiment, personal information will bedescribed as an example of a predetermined item not to be retained aslog information, but the predetermined item is not limited to thisexample. As with the first exemplary embodiment, the predetermined itemnot to be retained as log information is, for example, informationlinked to identification of a user. Examples of the predetermined iteminclude a job name, user identification information, a file name, anddestination information that are related to an executed job.

As for FIGS. 1, 2, and 3, the third exemplary embodiment is similar tothe first exemplary embodiment, and therefore description with referenceto these drawings will be omitted. In the third exemplary embodiment, auser of a multifunction peripheral 100 is managed, and the user logs inbeforehand to execute a job.

FIG. 8 is a flowchart illustrating an example of information processingfor recording in a job log 310 and a job setting history 320, during jobexecution by the multifunction peripheral 100 according to the thirdexemplary embodiment.

In step S801, a UI control module 340 receives job setting from a uservia an operation unit 220. For example, the UI control module 340receives setting related to job control to be executed by themultifunction peripheral 100, such as the number of copies for a copyjob, and a transmission destination for a fax transmission job, via theoperation unit 220. Further, the UI control module 340 may store settinginformation that indicates setting for not retaining information about adesignated item in a job log, into the HDD 205, based on a designationoperation performed by the user via the operation unit 220. Thisprocessing is an example of the first setting processing for notretaining information about a designated item in a job log.

In step S802, the UI control module 340 determines whether a job startoperation is received from the user. If the UI control module 340determines that a job start operation is received from the user (YES instep S802), the processing proceeds to step S803. If the UI controlmodule 340 determines that a job start operation is not received fromthe user (NO in step S802), step S801 is repeated.

In step S803, the UI control module 340 saves the job setting receivedin step S801, in the job setting history 320 managed by a log managementmodule 300.

In step S804, a job control module 330 starts execution of a job.

In step S805, the job control module 330 generates log data of the jobof which execution has started, in the job log 310 managed by the logmanagement module 300.

In step S806, the job control module 330 determines whether the job iscompleted. If the job control module 330 determines that the job iscompleted (YES in step S806), the processing proceeds to step S808. Ifthe job control module 330 determines that the job is not completed (NOin step S806), the processing proceeds to step S807.

In step S807, the job control module 330 updates the job log 310 managedby the log management module 300, based on a job execution status.

In step S808, the job control module 330 performs job terminationprocessing.

In step S809, a log data access unit 303 records the log data of thejob, including data corresponding to the personal information, in thejob log 310.

FIG. 9 is a flowchart illustrating an example of information processingat the time of the logout.

In step S901, the UI control module 340 performs logout processing, uponreceiving a logout operation from the user via the operation unit 220.

In step S902, a personal information determination unit 302 determineswhether the setting indicates non-recording of the personal informationfor the job log 310 and the job setting history 320. The setting thatindicates whether to record the personal information can be registeredby the user as with the first exemplary embodiment and the secondexemplary embodiment, and the setting information is stored in the HDD205. If the personal information determination unit 302 determines thatthe setting indicates non-recording of the personal information for thejob log 310 and the job setting history 320 (YES in step S902), theprocessing proceeds to step S903. If the personal informationdetermination unit 302 determines that the setting indicates recordingof the personal information for the job log 310 and the job settinghistory 320 (NO in step S902), the processing in the flowchartillustrated in FIG. 9 ends.

In step S903, the log data access unit 303 deletes the datacorresponding to the personal information from the job log 310 and thejob setting history 320. The processing in step S903 is an example ofcontrol processing for deleting information about a designated item froma job log after completion of a job, in a case where setting is made notto retain the information about the designated item in the job log. Inthis process, information indicating that the information about thedesignated item is deleted may be recorded.

Table 6 indicates an example of the data of the job log 310 before thepersonal information deletion in step S903, and Table 7 indicates anexample of the data of the job log 310 after the personal informationdeletion in step S903.

TABLE 6 Job User Transmission Job Start Job End Operation ID NameDestination File Name Time Time Result 1 Hiroshima 03456798091 FAX1 2018May 21 2018 May 21 Success 18:41 18:43 2 Hiroshima hiroshima@mail.com20180521_1.pdf 2018 May 21 2018 May 21 Failure 18:51 18:55

TABLE 7 Trans- Job User mission Job Start Job End Operation ID NameDestination File Name Time Time Result 1 — — — 2018 May 21 2018 May 21Success 18:41 18:43 2 — — — 2018 May 21 2018 May 21 Failure 18:51 18:55

In the data in Table 6, a user name, a destination, and a transmissionfile name for each job are recorded, and therefore, the user can easilyconfirm a history of jobs executed by the user, during login. In thedata in Table 7, the information corresponding to the personalinformation including the user name, the destination, and thetransmission file name for each job is deleted from a history ofcommunication jobs executed by a user having a user name “Hiroshima”, ascompared with the data in Table 6.

In the present exemplary embodiment, the user name, the destination, andthe file name are each described an example of the personal information.However, the personal information is not limited to these examples andcan be any kind of information if the information is linked toidentification of a user.

Moreover, in step S902, the setting for deleting the personalinformation for each of the job log 310 and the job setting history 320may be common, or may be independent for each of the job log 310 and thejob setting history 320.

According to the present exemplary embodiment, even in a case where amode of not retaining a predetermined item as log information isdetermined, log information including the predetermined item is held fora job, until a user who has executed the job logs out. Subsequently,when the user logs out, information about the predetermined item in thelog information is deleted. The user can thereby confirm a job executionhistory of the user in a state where the predetermined item is included,during the login of the user, so that the convenience of the userimproves. Moreover, because the predetermined item is deleted after theuser logs out, leakage of information for identifying the user can beprevented. Alternatively, the information for identifying the user canbe prevented from being transmitted to an external apparatus such as anexternal server as log information despite the intention of the user.

Other Exemplary Embodiments

The present invention can also be implemented by supplying a programthat implements one or more functions of the above-described exemplaryembodiments to a system or apparatus via a network or storage medium,and causing one or more processors in a computer of the system orapparatus to execute processing by reading out the program. The presentinvention can also be implemented by a circuit (e.g., anapplication-specific integrated circuit (ASIC)) for implementing one ormore functions.

The exemplary embodiments of the present invention have been eachdescribed above as an example, but the present invention is not limitedto such specific exemplary embodiments.

Other Embodiments

Embodiment(s) of the present invention can also be realized by acomputer of a system or apparatus that reads out and executes computerexecutable instructions (e.g., one or more programs) recorded on astorage medium (which may also be referred to more fully as a‘non-transitory computer-readable storage medium’) to perform thefunctions of one or more of the above-described embodiment(s) and/orthat includes one or more circuits (e.g., application specificintegrated circuit (ASIC)) for performing the functions of one or moreof the above-described embodiment(s), and by a method performed by thecomputer of the system or apparatus by, for example, reading out andexecuting the computer executable instructions from the storage mediumto perform the functions of one or more of the above-describedembodiment(s) and/or controlling the one or more circuits to perform thefunctions of one or more of the above-described embodiment(s). Thecomputer may comprise one or more processors (e.g., central processingunit (CPU), micro processing unit (MPU)) and may include a network ofseparate computers or separate processors to read out and execute thecomputer executable instructions. The computer executable instructionsmay be provided to the computer, for example, from a network or thestorage medium. The storage medium may include, for example, one or moreof a hard disk, a random-access memory (RAM), a read only memory (ROM),a storage of distributed computing systems, an optical disk (such as acompact disc (CD), digital versatile disc (DVD), or Blu-ray Disc (BD)™),a flash memory device, a memory card, and the like.

While the present invention has been described with reference toexemplary embodiments, it is to be understood that the invention is notlimited to the disclosed exemplary embodiments. The scope of thefollowing claims is to be accorded the broadest interpretation so as toencompass all such modifications and equivalent structures andfunctions.

What is claimed is:
 1. An information processing apparatus that saves,as log information, information related to a job, comprising: at leastone memory device that stores a set of instructions; and at least oneprocessor that executes the set of instructions to: save, as loginformation in a first mode, at least time information about start timeof the job and user identification information of a user who hasinstructed execution of the job; and save, as log information in asecond mode, the time information without saving, as log information,the user identification information.
 2. The information processingapparatus according to claim 1, wherein the user identificationinformation is a name of the user.
 3. The information processingapparatus according to claim 1, wherein the job is a copy job.
 4. Theinformation processing apparatus according to claim 1, wherein settinginformation indicating a predetermined setting of the job is furthersaved as the log information in the first mode and the second mode. 5.The information processing apparatus according to claim 4, wherein thepredetermined setting of the job is a copy number of the copy job. 6.The information processing apparatus according to claim 1, wherein thejob is a fax job.
 7. The information processing apparatus according toclaim 6, wherein setting information indicating a predetermined settingof the fax job is further included in the log information in the firstmode and the second mode.
 8. The information processing apparatusaccording to claim 7, wherein the predetermined setting of the fax jobis a destination.
 9. The information processing apparatus according toclaim 1, wherein the at least one processor executes the set ofinstructions to: generate, as the log information in the second mode,the time information and the user identification information, and thendelete the user identification information from the log information. 10.The information processing apparatus according to claim 1, wherein theat least one processor executes the set of instructions to: hold, in thesecond mode, the user identification information until the user who haslogged in the information processing apparatus and who has instructedexecution of the job logs out from the information processing apparatus;and delete the user identification information from the log informationafter the user logs out from the information processing apparatus. 11.The information processing apparatus according to claim 1, wherein theat least one processor executes the set of instructions to: delete theuser identification information from the log information saved beforeswitching of the saving mode from the first mode to the second mode, ina case where the switching occurs.
 12. The information processingapparatus according to claim 1, wherein the information processingapparatus is a multifunctional apparatus.
 13. The information processingapparatus according to claim 1, wherein the information processingapparatus is a scanning apparatus.
 14. The information processingapparatus according to claim 1, wherein the information processingapparatus is a printing apparatus.
 15. The information processingapparatus according to claim 1, wherein the job is a print job.
 16. Theinformation processing apparatus according to claim 15, wherein theinformation processing apparatus executes the print job.
 17. Theinformation processing apparatus according to claim 3, wherein theinformation processing apparatus executes the copy job.
 18. Theinformation processing apparatus according to claim 6, wherein theinformation processing apparatus executes the fax job.
 19. Theinformation processing apparatus according to claim 1, whereininformation processing apparatus sets one of at least the first mode andthe second mode as a saving mode of the log information.
 20. Aninformation processing method for saving, as log information,information related to a job, comprising: saving, as log information ina first mode, at least time information about start time of the job anduser identification information of a user who has instructed executionof the job; and saving, as log information in a second mode, the timeinformation without saving, as log information, the user identificationinformation.
 21. A non-transitory computer-readable storage mediumstoring a program for causing a processor to execute an informationprocessing method for saving, as log information, information related toa job, the information processing method comprising: saving, as loginformation in a first mode, at least time information about start timeof the job and user identification information of a user who hasinstructed execution of the job; and saving, as log information in asecond mode, the time information without saving, as log information,the user identification information.
 22. An information processingapparatus that saves, as log information, information related to a job,comprising: at least one memory device that stores a set ofinstructions; and at least one processor that executes the set ofinstructions to: save, as log information in a first mode, at least timeinformation about start time of the job and a file name of a file whichis processed by the job; and save, as log information in a second mode,the time information without saving, as log information, the file name.23. The information processing apparatus according to claim 22, whereinthe job is a print job.
 24. The information processing apparatusaccording to claim 22, wherein the at least one processor executes theset of instructions to: generate, as log information in the second mode,the time information and the file name, and then delete the file namefrom the log information.
 25. The information processing apparatusaccording to claim 22, wherein the at least one processor executes theset of instructions to: hold, as log information in the second mode, thefile name until the user who has logged in the information processingapparatus and who has instructed execution of the job logs out from theinformation processing apparatus; and delete the file name from the loginformation after the user logs out from the information processingapparatus.
 26. The information processing apparatus according to claim22, wherein the at least one processor executes the set of instructionsto: delete the file name from the log information saved before switchingof the saving mode from the first mode to the second mode, in a casewhere the switching occurs.
 27. The information processing apparatusaccording to claim 22, wherein the information processing apparatus is amultifunctional apparatus.
 28. The information processing apparatusaccording to claim 22, wherein the information processing apparatus is ascanning apparatus.
 29. The information processing apparatus accordingto claim 22, wherein the information processing apparatus is a printingapparatus.
 30. The information processing apparatus according to claim23, wherein the information processing apparatus executes the print job.31. The information processing apparatus according to claim 22, whereininformation processing apparatus sets one of at least the first mode andthe second mode as a saving mode of the log information.